openSUSE Security Updates Address Denial of Service Vulnerabilities

On July 1, 2026, openSUSE released security updates for two vulnerabilities affecting the python-pytest-html and python-zeroconf packages. The vulnerabilities, identified as CVE-2026-21176 and CVE-2026-21175, could lead to denial of service conditions in openSUSE Leap 16.0 systems. Users are advised to apply the patches using YaST online_update or 'zypper patch'. The updates address critical flaws in the respective packages, which could be exploited to disrupt service availability. The vulnerabilities were confirmed by the openSUSE security team, and the advisory emphasizes the importance of prompt patching. Both vulnerabilities are specific to the python313 package versions included in the openSUSE Leap 16.0 distribution.

Key Points: • openSUSE released patches for two denial of service vulnerabilities on July 1, 2026. • CVE-2026-21176 and CVE-2026-21175 affect the python-pytest-html and python-zeroconf packages. • Users are recommended to apply security updates immediately to mitigate potential service disruptions.